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4 November 1975 


MEMORANDUM FOR THE RECORD 
SUBJECT: Project ORACLE Management Review Meeting; STATINTL 


The ORACLE Project monthly review was held at the Agency 
on 30 October 1975. Present at the meeting were: 


STATINITL 


The meeting closely followed the agenda (attached) except 
four specific problems were discussed in the afternoon. The 
summary overview, review of the action items, and the cost 
review did not add anything to the information package we 
received from[___]Jthe previous week. The hardware and STATINTL 
software reviews are discussed in the following pages. 
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Hardware Review 


STATINTL [sd presentation followed very closely the written 
report which was submitted the previous week. He noted that 
the Channel Simulators which are behind schedule do not STATINTL 
impact the PSAT. [asked that the[ 4 
PSAT which is primarily a hardware test be rescheduled for etait 
February 1976, just prior to shipment of the hardware. They 
did not give any reasons for this change. 


STATINTL ee a that continued testing of the hardware 
has revealed several deficiencies. He is still generating 
engineering changes and has started a second shift operation 
to work on the problem of data accuracy.[___—idjJreported at STATINTL 
last month's review that the hardware was placed in a controlled 
maintenance environment on 4 August. This seems to be a meaningless 
statement; most of the engineering labor is going to tasks 
other than maintenance. In any case, it is obvious that at 
this time more than a field engineer is required to keep the 
hardware operational. It should also be noted that total 
hardware labor currently charged to ORACLE is at the same 
level as that in August 1974. 


Software Review 


STATINTL | res erenented the software status review. She 
said has been concentrating on preparing the modules STATINTL 
which make up the system to be used for the Pre-shipment 
Acceptance Test (PSAT). The Monthly Technical Progress 
Report delivered the week before and the viewgraphs she 
presented at the meeting indicated all is well and work 
is going pretty much as planned. It was only after questioning 
that[>___Jadmitted to being late with the system integration STATINTL 
and had incorrectly reported six tasks as complete which 
have yet to be finished. It was also noted that the test 
jobstream we delivered to them in August has not been run 
yet. 


STATINTL [.____]has set 3 November 1975 as the day of decision 
as to whether or not the —_—CJPSAT will be conducted ST 
as scheduled during the period 16-26 November. ST 
said there is less than a 50% chance of a go decision. This 
contrasts mightily with the written reports we have received 


from{_] STATINTL 
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STATINTL [pointed out that it would be absurd to have a 
PSAT as scheduled because presently there are restrictions 
within the system which will guarantee failure. This state- 


me 1 contradictory solutions put forth 

by he would likeL___] =tatihtt 
to run the tests, worry abou that time then A 
address the contractual problems concerning PSAT. &, 
[_] asked us to redefine the tests so[____] could pass them; ‘ 


this solution he felt would improve the programmer's morale. 
He fears that otherwise the software group will lose its 


"momentum". The Agency did not promise to redefine the tests. 
After the PSAT digeusaton,[___ report that PSAT STATINTL 
preparation and training of recently hired programmers has 


caused some delays. She also noted that scheduled future 

development of the Data Management System is contingent upon 

hiring an additional programmer during the first week in 

November. Discussion about the Transport Driver Interface 

Module which has been scheduled for a rewrite revealed the 

work is necessary to permit that software to receive norma. 

program maintenance. nded her briefing by STATINTL 
describing their newly developed Program Trouble Report system. 


A comment about the PSAT schedule and the state of 


| a is necessary here. I was informed ate tiTt 
by Messrs two weeks ago that the project is not A, 
going well. These gentlemen discovered several serious 
problems which will be discussed later in this report. The 
most astounding was that[____] did not want the government STATINTL 
to check the data accuracy of the ORACLE system during the STATINTL 
PSAT. I immediately calleaL____and ETATINTL 
aske or lanations on all points. He admitted to the 
problems but would not discuss reasons or responsibilities. 
He said higher level management had not been informed. I 
asked him to be prepared to present these problems at the 
Management Review Meeting. By the time of the meeting 
[____ ]realized that it would look ridiculous not to test STATINTL 
data accuracy and so dropped their request_to delete that STAT 
aspect of PSAT. As to the other problems,[__] did not INTL 
bring them up for discussion; therefore, I asked that they 


be considered separately later in the day. had already STATINTL 
been aware of the problems turned up by and STATINTL 

it is clear they had no intention of revealing them STATINTL 
until the final acceptance period. Based on history STATINTL 


of reticence, I am concerned there could be other serious 
problems waiting for us. 


Approved For Release 2002/08/15 : CIA-RDP83T00573R000500080010-1 
3 


STATINTL 


STATINITL 


STATINITL 


STATINTL 
STATINITL 
STATINITL 


Approved For Relggse 2002/08/15 : CIA-RDP83T00573R086500080010-1 


Major Problems 
Expandability of the ORACLE Hardware 


informed us that when additional hardware is 
added to the system there will be certain restrictions. 
They are briefly summarized below: 


a) “Perfect switching" is lost between Data Channels (DC's) 
and External Data Channel Processors (EDCP's) when the 
number of EDCP's is increased. 


b) "Perfect switching" is lost between Data Channels (DC's) 
and Transport Drivers (TD's) when the number of DC's is 
increased and/or the number of To's is increased. 


[= has defined "perfect switching" as the ability of one 
device to be accessed by any other device. Perfect switching 
permits straightforward software handlers and guarantees that 
any single device failure will not cause the system to be 
inoperable but will result only in some degree of degradation. 


During the discussion,| ____] took the position that STATINTL 
they never said perfect switching would be provided with 


hardware expansion. At this time software has not been 

designed to handle the more severe roblems of accessing 

and recovery from device failures. Dd suggested STATINTL 
Ww 


we document our requirements and 1 review them. STATINTL 
Functional Growth of the ORACLE System 


revealed that at any given time only one of 
the Storage Control Processors (SCP) can access the entire 
bank of Transport Drivers. Thus although we have two SCP's, 
it becomes impossible to isolate hardware devices such 
that production can be serviced with one while local 
modifications and major enhancement efforts can be supported 
by the second one. 


[______Jagain took the position that they have not committed 
a design error. As before asked that we document 
our requirements for review. privately STATINTL 
expressed that the reason we purchased two SCP's was out of 
generosity. 


A side light of this problem is that this situation 
inhibits some types of hardware diagnostics. Complete 
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testing and repair of the Transport Driver Interface can 
only be performed by shutting down the production system. 
The same holds true for initializing the mass storage tapes. 
This operation cannot be performed on the spare scp. It 
must be done using the active SCP which we feel can only be 
used to service production. 


Software Deficiencies 


STATINTL [__jnas designed the ORACLE software such that a 
dedicated disk controller is required to permit an SCP 
to service the internal system files. This aspect of the 
STATINTL design is contrary to the Design Specification; however, 
| |denies this. They have flatly stated that without a 


dedicated controller the system will simply not function. 


The result here is that more money and space will be 
required for back-up controllers. More importantly, the 
design they are proposing introduces a condition where a 
single device failure can bring down the entire production 
system. If the dedicated controller fails, a spare one must 
be switched to the SCP while the failed one is being repaired. 
The specification calls for shared controllers such that a 
failure will only degrade performance rather than bring the 
system to a stop. 

STATINTL 

Last but not least, _]stated that the system will 
use only one SCP ata time, rather than two. The second SCP 
is only for redundancy and will be of use only when the 
first one fails. At this time we cannot judge the impact of 
this unilateral decision to change the specification. If 
one SCP can provide the necessary performance level, no great 
harm will be done. Further, the control software will be 
greatly simplified. Agency agreement here will provide 
the opportunity to apply manpower to other areas. 

STATINTL 

My view is that all of the problems described above 

STATINTL result from not adhering to the specifications stated in 
the[____] technical proposal and in the 19 March Mass Storage 
System Design, both of which are part of the contract. All 
but the last problem, single SCP control, have adverse 
consequences. Most systems suffer from shortcutting but 
planned deficiencies for a system that has a strong chance 
of being a one-of-a-kind will surely invite disaster. The 
software team has already shown it has severe problems with 
its performance. I would not like to see that same group try 
to mitigate hardware problems with clever software. 
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Finally, the most serious aspect is thatl___] dia not STATINTL 
voluntarily inform us of any of the problems. We discovered 


them all after the fact. 


STATINTL 


Manager, Project 
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‘ AGENDA 


TiS-2 MASS STORAGE SYSTEM 


OCTOBER PROGRESS REVIEW 


I.. LOCATION 


C.I.A. Headquarters, McLean, Va. 


II. SCHEDULE 


‘ Thursday, October 30, 1975, 0900 - 1430 Hour 
STATINTL : 


III. AGENDA ITEMS 


0900 — 0915 Introduction/Summary Overview 
0915 ~ 0930 Review of Meeting Action Items 


0930 - 1000 Hardware Review/Status_ 
1000 - 1015 Break . 
1015 - 1130 Software Review/Status 


1130 - 1300 Lunch , 


1300 - 1315 Cost/Financial Report Review 
1315 - 1330 Other Open Items/Establish Schedule for 
November Review 
1 : : . 
1330 - 1430 Summary Review and Action Items List 
‘ wMS 
10-20-75 
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